What is the "lsass.exe" ? Variant 65081

Our database contains 1671 different files for filename lsass.exe but this page contains information about single file with specific attributes. If you want to see general information about the lsass.exe then visit General Information Page . You can also check most distributed file variants with name lsass.exe. This file belongs to product ?? and was developed by company ??. Agregate rating is 1(1) stars - based on 1 reviews.This is executable file. You can find it running in Task Manager as the process lsass.exe.

Product:: ??
Company:: ??
Description:: (Empty Value)
Version:: 0.0.0.0
MD5:: bb23ecddeba30d3cc0b0e920dbff57fa
SHA1:: 37dd6e90a4c21e8b92452e0b60537f1eacc22f26
SHA256:: 2e52517a2c29b79c697f9be10c2b82e71d7782c89f8e8d17de0b53dd29d9b0bb
Size:: 551669
Directory:: %SystemDiskRoot%\Win
Operating System:: Windows XP
Occurence:: Low

Is the Process "lsass.exe" Safe or Threat ?

Loading Graph

100% of reviewed files are marked as Threat .

Our final rating for this file is Threat. Final rating is based on file reviews, discovered date, users occurence and antivirus scan results.

72% of reviewed files with different MD5 located in different directory are marked as Safe .
28% of reviewed files with different MD5 located in different directory are marked as Threat .

User Reviews of the "lsass.exe"

Add Own Review

THREATrating from user MikeOne (Variant: 65081)
In this MD5 version, this file was marked by most antiviruses as Worm / Trojan-Spy.Win32.KeyLogger virus. Remove it from Your computer. Scan is recommended. Check the MD5 hash and file location, there can more files with this name.

Reviews of all lsass.exe variants

Reviews for different files with filename "%SystemDiskRoot%\Win\lsass.exe"

THREATrating from user MikeOne for file %SystemDiskRoot%\Win\lsass.exe (Variant: 19184563)
In origin, this file as a core Windows system process: The process lsass.exe is the Local Security Authentication Server. It is a safe file from Microsoft. Lsass.exe is responsible for security policy enforcement within the operating system, verifies users logging on to a Windows computer or server, handles password changes, and creates access tokens. It also writes to the Windows Security Log. In this case this file should be a target for lot of viruses. It should be located in the %system32% directory. Check the MD5 sumcheck. In this version, this file is infected by a virus.